Your message dated Thu, 27 Jan 2022 17:20:17 +0000
with message-id <[email protected]>
and subject line Bug#1004173: fixed in prosody 0.11.13-1
has caused the Debian Bug report #1004173,
regarding prosody: Regression from CVE-2022-0217: memory leak
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1004173: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1004173
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: prosody
Version: 0.11.12-1
Severity: important
Tags: upstream
X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Control: found -1 0.11.2-1+deb10u3
Control: found -1 0.11.9-2+deb11u1
Control: affects -1 security.debian.org,release.debian.org
Hi,
https://www.openwall.com/lists/oss-security/2022/01/20/4 mentions a
regression from the security fix for CVE-2022-0217.
Fixing commit: https://hg.prosody.im/trunk/rev/e5e0ab93d7f4
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: prosody
Source-Version: 0.11.13-1
Done: Victor Seva <[email protected]>
We believe that the bug you reported is fixed in the latest version of
prosody, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Victor Seva <[email protected]> (supplier of updated prosody package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 27 Jan 2022 17:56:07 +0100
Source: prosody
Architecture: source
Version: 0.11.13-1
Distribution: unstable
Urgency: medium
Maintainer: Debian XMPP Maintainers <[email protected]>
Changed-By: Victor Seva <[email protected]>
Closes: 1004173
Changes:
prosody (0.11.13-1) unstable; urgency=medium
.
* New upstream version 0.11.13 (Closes: #1004173)
Checksums-Sha1:
83ace5792af08e503e444543f860cffbb5a5c710 2090 prosody_0.11.13-1.dsc
1cc5a72d98738872d0c1a4c34b1fcb8878348c7d 439816 prosody_0.11.13.orig.tar.gz
9a627d6364a088aa70a837fdc6112d9b8510f7c2 833 prosody_0.11.13.orig.tar.gz.asc
5b98fdac62b2f6ea0194b2421edd959966a624ff 28672 prosody_0.11.13-1.debian.tar.xz
c86bf8da9a23f37547d128b760129affcbc6c6f6 6689 prosody_0.11.13-1_amd64.buildinfo
Checksums-Sha256:
fc816adb4f8d9e7fd787dcc9751d0e7f127c31c26d56d672b0e78f2217a563c5 2090
prosody_0.11.13-1.dsc
39c61b346a09b5125b604cb969e14206cbbcb86c81156ffc6ba2d62527cf0432 439816
prosody_0.11.13.orig.tar.gz
27442f7b86758b3a1eca3c6a9da51a1405b2cf6bc674706cf6988845b9b22512 833
prosody_0.11.13.orig.tar.gz.asc
bea1b54cb465d3337f04bc452996ba3d624b454e1be111eb64a5e32a89ad83c7 28672
prosody_0.11.13-1.debian.tar.xz
be60952c73f43bd87ef31b61d1c0b691e8862d38782bda5d03a0f9b911f581c7 6689
prosody_0.11.13-1_amd64.buildinfo
Files:
83d6612b49fa06799b8d26bf32705dec 2090 net optional prosody_0.11.13-1.dsc
7214ee57d4702585bd0d3428e69790b4 439816 net optional
prosody_0.11.13.orig.tar.gz
75090269aca523bc34c6a5f86bfe405b 833 net optional
prosody_0.11.13.orig.tar.gz.asc
ce169174ad3abf40d788989144cf8128 28672 net optional
prosody_0.11.13-1.debian.tar.xz
f0854d7becfeb87fd51a1ea1e1228132 6689 net optional
prosody_0.11.13-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQFFBAEBCgAvFiEEDmBQEMrYIhRFqKAgIXSmjn2oLMcFAmHyzzQRHHZzZXZhQGRl
Ymlhbi5vcmcACgkQIXSmjn2oLMdKLQgAguHhSBGU9GzG9qRtoVcCeQ+ApzA83zkj
WM1vnw2/T/s99kEjVEQeVDxgYWNpxnWvw/9ZBjTegpycwdXb5D+vi3leU9TLrCdu
YMK6CkS+2/G2m/EXtY6dLJgpsRzkf6joKcXSBoZ6SLlUJIvSqQHSGlH+vGRB4sIX
V7BRahAYE/4a0y9GEo2S8fmmaNSmnDANrTgHE0ACvv74gR09CWD/9zyqWRdcniAR
yRZNiEllVOja/nep/r6fcHZElZV4+/WbYs+XglIw4X9LFxTAbgY4Iwdnq7g9j89Y
zqkXZ5lScLfuSUJc25tMivue2cwOHU4SMN1s7hy2uVB6Ua03zdu9Tw==
=TpSj
-----END PGP SIGNATURE-----
--- End Message ---
